PIX 515 and VLANs

satoshi.takano · ‎05-22-2007

I have a PIX 515 with 3 FE's (DMZ included). I have a switch behind the DMZ interface where the servers are connected to.

What I would like to do is to have 2 VLANs (1 for MGMT and 1 for Data), so I can manage the switch in a separate VLAN.

Question is whether I can do that, and what the sample configs would look like.

Thanks.

Jon Marshall · ‎05-22-2007

Hi

Assuming it is a pix 515E yes you can do this.

Here is a link to a recent conversation covering the same thing.

http://forum.cisco.com/eforum/servlet/NetProf;jsessionid=7623C98B79E17F83A5F5EBEC913D7E4C.SJ4B?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dde8e06

HTH

Jon

satoshi.takano · ‎05-22-2007

Thanks.

Looks like I'll need to use dot1q trunking. It's a 3Com 4200 switch which claims that it does support. I need to make sure that the PIX can support that.

Jon Marshall · ‎05-22-2007

Hi

Don't know bout the 3com's but 802.1q is an industry standard and this is encapsulation that the pix uses so as long as the 3com is not doing something "different" than the standard you should be okay.

HTH

Jon